hwmon: (axi-fan-control) Fix possible NULL pointer dereference
Published May 21, 2024
5.5
MEDIUMCVSS 3.1
EPSS 0.24%
Description
axi_fan_control_irq_handler(), dependent on the private axi_fan_control_data structure, might be called before the hwmon device is registered. That will cause an "Unable to handle kernel NULL pointer dereference" error.
Affected products
-
- Version 8412b410fa5eStatusaffectedConstraints<2a5b3370a1d9
- Version 8412b410fa5eStatusaffectedConstraints<33de53a27060
- Version 8412b410fa5eStatusaffectedConstraints<7d870088db48
- Version 8412b410fa5eStatusaffectedConstraints<b3e7eb23a6e9
- Version 8412b410fa5eStatusaffectedConstraints<c49f14cc1bb1
- Version 8412b410fa5eStatusaffectedConstraints<f62b89698478
- Version
-
- Version 5.7StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<5.7
- Version 5.10.201StatusunaffectedConstraints<=5.10.*
- Version 5.15.139StatusunaffectedConstraints<=5.15.*
- Version 6.1.63StatusunaffectedConstraints<=6.1.*
- Version 6.5.12StatusunaffectedConstraints<=6.5.*
- Version 6.6.2StatusunaffectedConstraints<=6.6.*
- Version 6.7StatusunaffectedConstraints<=*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
| |||||||||||||||||||||||||||
| Linux | Linux | affected |
|
- ≥ 5.7 · < 5.10.201
- ≥ 5.11 · < 5.15.139
- ≥ 5.16 · < 6.1.63
- ≥ 6.2 · < 6.5.12
- ≥ 6.6 · < 6.6.2
No data.
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (11)
- https://access.redhat.com/security/cve/CVE-2023-52863 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2282629 Issue Tracking
- https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0 Patch
- https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105 Patch
- https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a Patch
- https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062 Patch
- https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb Patch
- https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0 Patch
- https://lore.kernel.org/linux-cve-announce/2024052118-CVE-2023-52863-490d@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2023-52863
- https://www.cve.org/CVERecord?id=CVE-2023-52863
Change history (0)
No recorded changes yet.